Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
File:                     9zORrduc3mc6pJF07KjUMLSfGcM.mft (raw, json)
Hash identifier:          SyDSeM0xTTXovQqfBEWAGtUJLRnkAWIE68wn1SpiP7k=
Subject key identifier:   88:2E:83:CC:76:EA:53:C5:CB:EB:9F:C7:6D:82:E8:0C:69:37:E9:48
Authority key identifier: F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3
Certificate issuer:       /CN=F36914A7AR/serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
Certificate serial:       0809
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
Manifest number:          0808
Signing time:             Fri 25 Apr 2025 01:42:10 +0000
Manifest this update:     Fri 25 Apr 2025 01:42:09 +0000
Manifest next update:     Sun 27 Apr 2025 01:42:09 +0000
Files and hashes:         1: 9zORrduc3mc6pJF07KjUMLSfGcM.crl (hash: 7IhTXuCCnRobAC2hp3tInnPBPkSqTSNvb/qiYDS/hOc=)
                          2: FBB32E86FC8111E9BB7F292CF8AEA228.roa (hash: HuM3BwkpOIpwBJ+xYmwrtHtu6kY28m4Q/SLVfLjrjjs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                          rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AR, serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
        Validity
            Not Before: Apr 25 01:42:09 2025 GMT
            Not After : Apr 27 01:42:09 2025 GMT
        Subject: CN=680ae872-6cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:cd:4b:53:59:b5:4e:c8:3c:03:ee:79:b5:
                    ea:d2:d2:c6:de:dc:e3:bd:9c:60:77:bb:a8:82:93:
                    83:1d:14:78:ce:42:a5:53:a3:26:dc:59:90:8f:e4:
                    0a:d9:d6:f5:a5:7b:1e:fe:60:1b:07:d8:f3:1f:d3:
                    78:23:54:a9:f4:a5:3f:08:7b:5f:92:fd:8a:ae:67:
                    4d:a4:17:75:99:01:c0:9b:53:9b:4a:9d:31:61:52:
                    84:17:9f:10:b8:00:b2:d3:8e:46:c3:05:e8:97:01:
                    a6:5d:40:24:d1:a3:69:bd:de:81:1b:38:e9:ee:b1:
                    b1:73:db:0c:b2:d2:f5:e1:57:35:a1:58:d0:68:e8:
                    2d:1a:f4:2d:57:f0:a9:78:02:bb:88:a0:46:05:9a:
                    5e:00:de:53:8e:6a:ff:2e:ca:cf:ca:77:e8:47:bd:
                    cd:0e:78:45:5b:a1:57:63:8d:91:55:d4:98:05:0c:
                    19:40:32:87:ce:57:17:b4:20:c5:cf:92:a0:ed:e0:
                    d2:cd:19:f5:e0:95:7f:5e:e0:d0:fd:93:3f:81:23:
                    d3:d4:1a:a9:50:50:08:45:e5:ae:f0:8b:3a:81:52:
                    87:25:86:d7:fe:ea:5d:fa:b2:95:fc:17:11:87:da:
                    13:33:37:5e:02:24:20:0e:a9:d0:38:4d:6d:db:f2:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2E:83:CC:76:EA:53:C5:CB:EB:9F:C7:6D:82:E8:0C:69:37:E9:48
            X509v3 Authority Key Identifier:
                keyid:F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0b:0d:a1:57:9d:3d:69:2a:5f:8e:e9:60:3d:9e:55:67:3e:
         ef:96:f8:90:d6:10:38:54:14:b0:2a:83:5d:4a:e7:c9:3f:ee:
         af:94:f5:ff:85:c5:c1:d0:a9:d1:2c:e4:26:f2:17:a2:57:97:
         8d:13:6a:a4:35:45:4b:96:02:3b:ef:89:ee:a8:6a:09:ec:56:
         6b:2f:bc:9c:12:08:f2:bc:2f:7f:eb:a3:38:84:fd:2c:ba:6d:
         07:32:9d:f7:c4:78:4f:f5:10:5c:bb:3c:07:a2:60:83:44:bd:
         87:c6:2a:db:20:fd:31:19:d5:1b:aa:bb:4a:4a:87:08:9e:40:
         cc:7b:f1:cb:7d:af:98:4f:6f:8a:df:ec:e1:bf:26:bb:05:5e:
         67:98:2f:0d:81:c0:3a:ac:a4:94:56:d1:79:87:16:8e:a7:e5:
         37:cc:74:15:78:6f:17:86:ea:7f:f7:4c:53:67:06:bc:6d:90:
         ec:8d:4e:39:ba:03:80:25:35:29:a0:33:38:77:94:26:29:bd:
         14:c2:b2:cd:86:54:0e:d2:5f:24:c6:a2:a3:cf:7a:25:3d:77:
         4b:6c:38:97:e7:d6:ee:fc:df:65:03:f4:4a:09:d8:fe:08:38:
         35:6d:f8:39:fe:be:f3:12:0c:45:e9:12:ba:d5:c3:43:f0:b5:
         ec:58:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:00 2025 by rpki-client on console.sobornost.net